Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/stpXgd3kzRBMChYThflwA___ToQ.roa
File: stpXgd3kzRBMChYThflwA___ToQ.roa (raw, json)
Hash identifier: msO9xTQDMwH9LWXw/X9vqQUp3yXk5oxblTw8333+9+w=
Subject key identifier: B2:DA:57:81:DD:E4:CD:10:4C:0A:16:13:85:F9:70:03:FF:FF:4E:84
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 02D1
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/stpXgd3kzRBMChYThflwA___ToQ.roa
Signing time: Sat 10 May 2025 20:08:10 +0000
ROA not before: Sat 10 May 2025 20:08:10 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721 (0x2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: May 10 20:08:10 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=B2DA5781DDE4CD104C0A161385F97003FFFF4E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:d6:7f:06:de:18:16:1d:ac:00:03:cf:f2:
c1:77:d1:d4:54:63:59:6d:be:7e:41:45:a0:3b:96:
73:ea:96:e6:e6:ca:02:5e:31:ca:dd:cb:6c:b7:db:
2b:9f:99:6b:0c:2e:41:23:38:41:d6:0b:1b:37:06:
3a:7d:c9:23:34:6e:8f:e9:eb:c0:34:bd:25:e1:96:
4d:df:0a:36:67:85:f2:df:38:08:bc:98:77:12:38:
16:2b:48:8d:33:a8:e1:b0:e5:55:67:a5:3c:37:a4:
32:33:b1:02:9c:df:b8:5b:7f:84:49:b7:96:7e:ac:
ea:24:e1:50:59:3d:22:49:4f:34:a1:7b:40:76:40:
fe:c4:d8:4c:97:7d:cc:bf:a5:0f:9b:0f:81:1b:1f:
2c:9d:0d:95:29:e5:c5:4e:ec:19:5e:19:3c:7f:cb:
83:e7:4e:b6:f7:0c:72:41:c2:c3:15:a2:69:18:59:
93:46:76:9d:7b:6d:38:93:ba:be:c0:0e:3e:1a:a2:
8d:a8:c1:46:6f:fd:18:d4:72:1f:56:6f:0d:aa:b5:
5d:4f:3a:5f:48:e4:12:96:9e:df:62:2b:4e:56:22:
fa:bf:a0:07:e1:c4:3e:9b:52:89:8a:f0:2b:ad:fc:
43:cb:f9:fc:81:95:b9:1e:c1:19:c7:11:5a:01:ee:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:57:81:DD:E4:CD:10:4C:0A:16:13:85:F9:70:03:FF:FF:4E:84
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/stpXgd3kzRBMChYThflwA___ToQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:37:31:f8:af:5e:24:a8:5c:dd:ae:34:9b:84:e5:6d:ea:27:
96:10:b2:51:ee:f2:db:91:b9:62:cf:e8:80:33:db:d0:34:04:
df:cd:15:58:15:75:a2:77:2a:8f:43:d2:c8:e5:06:02:e4:8b:
7c:bf:47:17:31:7b:a5:44:5f:d6:1b:57:ff:50:79:7c:43:45:
66:8e:e4:dc:5d:a0:d5:3b:a3:3b:eb:b0:ac:1e:2b:dd:51:27:
c5:2f:a6:c5:d8:d7:b9:41:b3:af:11:7b:11:84:27:54:63:2f:
df:ee:11:a0:25:79:48:14:8e:0a:23:b2:4a:18:13:e7:07:22:
bc:b9:1e:d0:61:2d:9e:db:b9:03:78:3d:9b:01:ea:fb:9e:e6:
0e:f1:72:7d:25:c9:b4:f1:83:ce:9d:71:6d:24:21:d6:7c:00:
f7:a8:e3:dd:04:c1:8a:72:bb:1e:80:61:e8:39:4d:cf:17:d4:
56:58:d8:28:70:b1:6d:bf:18:99:8c:59:8c:36:2c:d0:f7:98:
45:cb:fc:a3:ff:4b:6c:c4:19:58:aa:7b:20:98:bc:49:23:f9:
fb:9d:35:26:ef:a7:d5:6b:d7:31:f3:4b:8b:09:b7:f1:03:09:
e3:d4:3d:bf:b1:ec:93:55:00:77:87:22:2d:52:67:da:a4:78:
43:ff:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:48:06 2025 by rpki-client